Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16782a12-4c4b-3bee-8973-c5c78a3d62f3.roa
File:                     16782a12-4c4b-3bee-8973-c5c78a3d62f3.roa (raw, json)
Hash identifier:          LxHSbxKLsKwkP3acwDtoKr6zSzrP4dl584LxIkIwNjU=
Subject key identifier:   8A:10:CF:1B:2C:E6:D0:08:CC:2A:95:C0:C7:07:A4:A0:BC:35:5B:75
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AFEE6B8633C96F10E2B1C9960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16782a12-4c4b-3bee-8973-c5c78a3d62f3.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.54.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b8:63:3c:96:f1:0e:2b:1c:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=70b811b5-06aa-497e-9199-a5b22d33c232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:93:18:63:b9:75:1e:cc:b0:f2:56:92:5d:
                    af:cb:7e:03:54:8e:da:e0:fe:4c:ce:0a:8f:b7:ea:
                    ea:73:6f:7c:2d:70:ef:9e:57:12:2a:f2:84:f1:d0:
                    85:30:76:0e:07:ab:3c:8c:27:c9:95:d3:36:45:53:
                    07:59:1f:c2:8d:f0:28:9a:bb:b5:3e:58:43:5b:ce:
                    9f:53:a1:f2:bd:0b:79:d2:db:10:fb:6a:42:4f:e9:
                    a5:f3:1a:c0:3b:62:00:12:d1:39:75:0f:4a:ef:4f:
                    e8:6e:c2:cb:46:0b:73:6f:b8:ea:57:01:b0:24:0c:
                    52:7d:b2:71:c7:f9:78:d4:4e:d7:57:c9:e9:97:4e:
                    8e:3a:f7:bc:5b:c1:df:9c:d5:38:76:1e:c9:5a:72:
                    6c:c9:43:2e:a9:50:58:ea:59:f8:be:49:8b:cc:9d:
                    11:4c:5e:9d:31:d1:b8:95:0b:bc:80:cd:d2:49:26:
                    38:bd:dc:1d:3f:31:49:19:27:dc:36:b3:db:3c:3f:
                    33:ee:f5:9b:89:8c:64:53:a5:3f:96:f2:a6:4e:8f:
                    78:4d:06:78:1e:18:83:c4:af:a3:40:ec:f6:14:51:
                    d7:79:9e:9a:74:1c:fb:1a:40:5e:9b:56:f0:5e:6a:
                    b0:3a:19:7d:f9:bd:d1:0a:28:ec:7e:e1:65:eb:49:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:CF:1B:2C:E6:D0:08:CC:2A:95:C0:C7:07:A4:A0:BC:35:5B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16782a12-4c4b-3bee-8973-c5c78a3d62f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:79:63:30:f9:60:55:60:31:f5:33:71:29:55:d0:80:8b:72:
         5f:94:cb:ef:23:f6:d7:34:a7:ee:e3:7f:2e:98:46:25:b0:ae:
         2f:0a:a8:11:7f:e1:56:70:a7:20:c7:f4:38:7e:aa:65:77:5f:
         14:fe:6a:67:31:ed:ab:c0:f7:21:39:e6:c9:73:12:73:2a:a6:
         d3:7d:73:aa:17:47:9c:b6:73:ee:ad:39:7b:51:9d:5e:51:ea:
         d4:9e:aa:bd:c8:25:88:c4:4a:ba:dc:4f:e5:55:b1:42:28:31:
         34:5a:86:70:fd:5e:ed:84:a9:f1:d5:ec:b2:68:57:34:07:fb:
         f1:00:39:c9:03:45:2d:73:2a:7a:f1:42:90:39:59:03:12:db:
         58:be:eb:eb:75:3c:81:58:33:f2:10:ca:67:50:ea:81:f3:51:
         ce:62:f0:6a:1e:50:59:9b:1a:88:83:83:86:98:33:ea:f5:8c:
         ed:fb:a2:f1:02:7f:cb:62:0e:7f:47:47:c9:36:06:28:8e:33:
         05:84:01:f5:85:6d:1e:bb:35:0c:59:d7:5b:d0:99:d8:49:47:
         4d:16:f5:83:af:cf:f8:07:83:27:f8:ea:4e:73:8b:a2:ec:f7:
         3d:91:82:63:6a:b3:cd:49:0b:3f:dc:3c:dc:2e:95:82:22:9a:
         df:2f:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:04 2025 by rpki-client